🟡 Medium ⏱ 15–45 min Last verified: 21 April 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2011-4834, IBM PSIRT advisory page CVE: CVE-2011-4834 NVD summary: The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-UX, and Solaris allows local users to […]
🟠 High ⏱ 15–60 min Last verified: 21 April 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3449-1 Related CVEs: CVE-2015-3241 CVE-2015-3280 CVE-2015-5162 CVE-2015-7548 CVE-2015-7713 CVE-2015-8749 CVE-2016-2140 CVE-2014-3608 +9 more Upstream summary: George Shuklin discovered that OpenStack Nova incorrectly handled the migration process. A remote authenticated user […]
🟡 Medium ⏱ 15–45 min Last verified: 17 April 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2007-5804, IBM Support Bulletin CVE: CVE-2007-5804 NVD summary: cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in […]
🟡 Medium ⏱ 15–45 min Last verified: 17 April 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2008-1594, IBM Support Bulletin CVE: CVE-2008-1594 NVD summary: The kernel in IBM AIX 5.2 and 5.3 does not properly handle resizing JFS2 filesystems on concurrent volume groups spread across multiple nodes, which […]
🟠 High ⏱ 15–60 min Last verified: 17 April 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-2690 CVE-2011-2692 CVE-2011-2691 CVE-2011-3328 CVE-2011-3464 Upstream summary: Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when […]
🟠 High ⏱ 30–90 min Last verified: 17 April 2016 Affected versions: IBM AIX 7.2 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2013-3035, IBM Support Bulletin CVE: CVE-2013-3035 NVD summary: The IPv6 implementation in the inet subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allows remote attackers to cause […]
🟡 Medium ⏱ 10–30 min Last verified: 16 April 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2016:0706-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-2851 Upstream summary: Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption […]
🟡 Medium ⏱ 10–30 min Last verified: 16 April 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2013:1097-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-1983 Upstream summary: Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via […]
🟡 Medium ⏱ 15–45 min Last verified: 13 April 2016 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2016-8977, IBM Support Bulletin CVE: CVE-2016-8977 NVD summary: IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further […]
🟡 Medium ⏱ 10–30 min Last verified: 13 April 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2017:1568-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-0254 Upstream summary: Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted […]
